US20020120867A1 - In-line sign in - Google Patents

In-line sign in Download PDF

Info

Publication number
US20020120867A1
US20020120867A1 US09/792,359 US79235901A US2002120867A1 US 20020120867 A1 US20020120867 A1 US 20020120867A1 US 79235901 A US79235901 A US 79235901A US 2002120867 A1 US2002120867 A1 US 2002120867A1
Authority
US
United States
Prior art keywords
server
user
information
module
authenticated
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
US09/792,359
Other versions
US7421731B2 (en
Inventor
Christopher Mitchell
Ryan Battle
Darren Anderson
Joshua Poley
Greg Marks
John Howard
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Microsoft Technology Licensing LLC
Original Assignee
Microsoft Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Microsoft Corp filed Critical Microsoft Corp
Assigned to MICROSOFT CORPORATION reassignment MICROSOFT CORPORATION ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: BATTLE, RYAN W., HOWARD, JOHN HAL, ANDERSON, DARREN L., MARKS, GREG A., MITCHELL, CHRISTOPHER E., POLEY, JOSHUA G.
Priority to US09/792,359 priority Critical patent/US7421731B2/en
Assigned to MICROSOFT CORPORATION reassignment MICROSOFT CORPORATION ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: GUO, MICHAEL WEI-QUIANG
Publication of US20020120867A1 publication Critical patent/US20020120867A1/en
Publication of US7421731B2 publication Critical patent/US7421731B2/en
Application granted granted Critical
Assigned to MICROSOFT TECHNOLOGY LICENSING, LLC reassignment MICROSOFT TECHNOLOGY LICENSING, LLC ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: MICROSOFT CORPORATION
Expired - Fee Related legal-status Critical Current
Adjusted expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for supporting authentication of entities communicating through a packet data network
    • H04L63/0815Network architectures or network communication protocols for network security for supporting authentication of entities communicating through a packet data network providing single-sign-on or federations

Abstract

A user, by way of a computing device, requests and receives content from a first server at the computing device. An authentication response is also received from the first server at the computing device of the user. The authentication response includes an address of the second server and an executable script. The computing device of the user executes the executable script by issuing a request to the second server for state information corresponding to the user, receiving the state information from the second server; and determining, based on the state information, whether the user is authenticated to the second server. If the user is not authenticated to the second server, the computer device of the user displays a login module that is visually associated with the first server. Such login module collects login information for authenticating the user to the second server. If the user is authenticated in the second server, the computing device of the user issues a request to the second server for vouching information for authenticating the user to the first server.

Description

    TECHNICAL FIELD
  • The invention relates to computer networks. In particular, the invention relates to signing into a network server on the computer network. [0001]
  • BACKGROUND OF THE INVENTION
  • With the increasing popularity of the Internet, more network servers require users to sign in thereto. Signing in has numerous benefits for both the user and the network server. The network server benefits by gaining information about the user. Such information may include the user's email address, name, geographical region, and commercial and/or personal preferences, etc. Accordingly, the network server may use such information in a variety of commercially beneficial ways. [0002]
  • The user benefits by having a more dynamic and personalized user experience. In this sense, the network server, as presented to the user in the form of a web page, may have a different ‘look and feel’ or different advertising based on the user's preferences, past experiences, etc. Thus, the site displays information more relevant to the user. [0003]
  • At least in some instances, a network server (first network server), when signing in a user, chooses to use another network server's (second network server) sign in methodology. This alleviates the first network server from creating and maintaining its own sign in process and allows the second network server to generate revenue through licensing its sign in methodology. However, a user attempting to sign into the first network server which is using the sign in methodology of the second network server, has heretofore been presented with a sign in screen that has the look and feel of the second network server and not of the first network server. This unexpected and potentially misleading situation may be upsetting to the user and detracts from the first network server's user experience. As a result, such situation can deter the first network server from using the second network server's sign in methodology. [0004]
  • Therefore, a need exists for a method and an apparatus for allowing a first network server to use the functionality of a second server's sign in methodology yet still maintain the look and feel of the first server during such sign in. That is, a need exists for an ‘in-line’ sign in method. [0005]
  • SUMMARY OF THE INVENTION
  • The present invention satisfies the aforementioned need by providing a method of in-line sign in that allows a user to sign into a first server based on a sign-in methodology of a second server. The method allows the first server to use, within its own user interface, the functional sign-in methodology of the second server. Such method provides a seamless and effective sign-in process for the user by not detracting from the user experience provided by the first server. [0006]
  • In the method, an authentication response, including an address of the second server and an executable script, is received from the first server at a computing device of the user. The executable script is then executed in the computing device. Executing the executable script includes issuing a request to the address of the second server for state information and receiving such state information from the second server. Then, based on the state information, the computing device determines whether the user is authenticated to the second server. [0007]
  • If the user is authenticated to the second server, the computer device issues a request to the second server for vouching information for authenticating the user at the computing device to the first server. If the user is not authenticated to the second server, the computer device displays a login module to collect login information to authenticate the user to the second server. The login module is presented to the user within the context of the look and feel of the first server web page. When the user enters their login information into the login module of the computer device, then the computer device will POST (HttpRequest) the information to the second server. Accordingly, the user is not startled or upset by the sudden appearance of a foreign web page such as that from the second server.[0008]
  • BRIEF DESCRIPTION OF THE DRAWINGS
  • Other features of the invention are further apparent from the following detailed description of the embodiments of the present invention taken in conjunction with the accompanying drawings, of which: [0009]
  • FIG. 1 is a block diagram of an exemplary networking environment in which aspects of the present invention may be implemented; [0010]
  • FIG. 2 is a flowchart illustrating the process of a user signing in to a first server using the authentication methodology of a second server in accordance with one embodiment of the present invention; and [0011]
  • FIG. 3 is a block diagram illustrating the process of a user signing in to an affiliate server using the signing in methodology of an authentication server in accordance with one embodiment of the present invention.[0012]
  • DETAILED DESCRIPTION OF THE INVENTION
  • In the present invention, a first server authenticates a user based on state information from a second server. In particular, a user at a computing device requests content from a first server. The user first receives an authentication response from the first server. The authentication response from the first server includes an address of the second server and an executable script. The computing device of the user, typically through a web browser, parses the authentication response and, in doing so, executes the executable script. Executing the script includes issuing a request to the second server for state information and receiving the state information from the second server. After receiving such state information, the computing device/browser determines, based on such state information, whether the user is authenticated to the second server. [0013]
  • If the user is authenticated to the second server, the computer device/browser issues a request to the second server for vouching information for authenticating the user to the first server. If the user is not authenticated in the second server, the computer device/browser displays a login module for collecting login information for authenticating the user to the second server. Importantly, the login module is presented to the user within the context of the look and feel of the first server web page. Accordingly, the user is not upset by the sudden appearance of a foreign web page such as that from the second server. [0014]
  • FIG. 1 illustrates an exemplary network environment in which aspects of the invention may be implemented. A client computer system [0015] 100 is coupled to a network 102. In this example, network 102 is the Internet (or the World-Wide Web). However, the teachings of the invention can be applied to any data communication network. Multiple affiliate servers 104, 106, and 108 are coupled to network 102, thereby allowing a user at a computing device or user computer system 100 to access web servers 104, 106, and 108 via the network. Affiliate servers 104, 106, and 108 are also referred to as “web servers” and “network servers”. An authentication server 110 is also coupled to network 102, allowing communication between the authentication server and user computer system 100 and web servers 104, 106, and 108. Although referred to as an “authentication server”, authentication server 110 is also a web server capable of interacting with web browsers and other web servers. In this example, data is communicated between the authentication server, user computer system, and web servers using the Hypertext Transfer Protocol (HTTP), a protocol commonly used on the Internet to exchange information. Other protocols may be used without departing from the scope of the present invention.
  • An authentication database [0016] 112 is coupled to authentication server 110. The authentication database 112 contains information necessary to authenticate users and also identifies which elements of the user profile information should be provided to a particular affiliate server when the user accesses the affiliate server. Although the authentication database 112 is shown separately from the authentication server 110, in other embodiments of the invention, the authentication database 112 is contained within the authentication server.
  • The term “affiliate server” is defined herein as a web server that has “registered” or otherwise established a relationship or affiliation with the authentication server [0017] 110. Each affiliate server 104, 106, and 108 includes a code sequence (not shown) that allows the affiliate server to share information with the authentication server 110 when a user (who is also registered with the authentication server) requests access to the affiliate server. Each affiliate server is assigned a unique ID, which the affiliate server transmits to the authentication server, thereby identifying itself to the authentication server.
  • FIG. 2 is a flowchart illustrating the process of a user signing in to an affiliate server [0018] 104 using the authentication methodology of an authentication server 110 in accordance with the present invention. According to the present invention, at step 200, a client requests content from the affiliate server 104. Typically, content is requested by the user at the computer system 100 by either typing a URL of a network server or clicking on a hyper link associated with such URL.
  • The affiliate server [0019] 104 determines locally whether the user is already authenticated at such affiliate server 104 at step 205. In one embodiment of the present invention, if the user is authenticated at the affiliate server 104 using the authentication methodology of the affiliate server 104, the user may access the affiliate server 104 at step 210. However, if the user is not authenticated at the affiliate server 104, the affiliate server 104, in response to the user's request for content, sends the user's computer system an authentication response at step 215.
  • The authentication response may be in the form of an HTML page or a portion thereof, and may include, in pertinent part, a JavaScript tag and at least one executable script. The JavaScript tag includes an address of the authentication server [0020] 110 (whose authentication methodology is to be used by the affiliate server 104) having state information concerning the user. The at least one executable script may include or refer to an Application Program Interface (API) provided to the affiliate server 104 by the authentication server 110 and may contain at least one information segment. The information segment receives the state information for the user from the authentication server as will be described below.
  • After receiving the authentication response, the browser or the like on the user's computer system parses the authentication response. In doing so, at step [0021] 220, the browser encounters the JavaScript tag that directs the user's computer system 100 to the authentication server 110 to retrieve state information concerning the user. At this point, the computer system 100 passes state information to the authentication server 110. The state information is retrieved from the authentication server 110 and is sent to the user's computer system 100. The user's computer system 100 at step 225 receives such state information from the authentication server 110 and appropriately places the state information in the information segments in the executable script.
  • Importantly, and in accordance with one embodiment of the present invention, the affiliate server [0022] 104 incorporates the JavaScript tag and the executable scripts into the authentication response in any manner. In particular, the authentication response from the affiliate server 104 may be embodied within a web page having the look and feel of the affiliate server 104, even though information is being sent to and received from the authentication server 110. Thus, the affiliate server 104 can use the functionality of the authentication methodology of the authentication server 110, in any manner desired. To the user, the user experience does not change because the affiliate server 104 always maintains control of the user experience through the HTML page. As a result, a seamless sign-in process is provided to the user, i.e. the user is not displayed a screen from the authentication server 110 having a different look and feel. Therefore, to the user, it appears that the user's computer system 100 never left the affiliate server 104 even though the user's computer system 100 has contacted the authentication server 110 and employed the authentication methodology thereat on behalf of the affiliate server 104.
  • After the computer system [0023] 100 receives the state information from the authentication server 110, the browser of the computer system 100 executes the executable script using such state information. In one embodiment of the present invention, the executable script employs the received state information as input to functions associated with the aforementioned API's, where the functions result in an output that signifies whether the user is indeed authenticated by the authentication server 110. Such authentication is described more fully in U.S. patent application Ser. Nos. 09/349619 and 09/350018, which are hereby incorporated by reference in their entirety. Notably, an appropriate authentication process may be employed by the authentication server 110 and the executable script at the computer system 100 without departing from the scope of the present invention.
  • In one embodiment of the present invention, if the browser of the computer system [0024] 100 determines the client is indeed authenticated, the executable script may direct the user computer system 100 to the authentication server 110 to retrieve vouching information at step 230. The vouching information serves to represent to the affiliate server 104 that the user is in fact authenticated by the authentication server 110. In one embodiment, the vouching information is written by the authentication server 110 according to a secret shared with the affiliate server 104. The secret may be any appropriate secret without departing from the scope of the present invention.
  • Upon receipt of the vouching information, the browser of the computer system [0025] 100 forwards the same to the affiliate server 104 at step 235. As may appreciated, the affiliate server 104 employs the vouching information and the secret shared with the authentication server 110 to read the vouching information and after doing so the affiliate server 104 in fact signs in the user thereto. The aforementioned U.S. patent application Ser. Nos. 09/349619 and 09/350018, already incorporated by reference herein, describe the process as performed by the affiliate server 104 in more detail.
  • If the user is not authenticated at the authentication server [0026] 110, the executable script may direct the user computer system 100 to display a login screen for the user to input user information with regard to such authentication server 110, as at step 240. As may be appreciated, the inputted user information includes such items as a user identification and password with regard to the authentication server 110, and is forwarded by the browser on the computer system 100 to the authentication server 110.
  • The computing device [0027] 100 may then receive an acknowledgement from the authentication server 110 that the user is authenticated to the authentication server 104. In one embodiment the present invention, the acknowledgement is in the form of cookies or the like. However, other forms of acknowledgement may be used without departing from the scope of the present invention. Thereafter, the browser of the computer system 100 may direct the user computer system 100 to the authentication server 110 to retrieve vouching information and forwards the same to the affiliate server 104, in the manner of steps 230 and 235 as discussed above, and the affiliate server 104 signs in the user thereto. Once the user is logged into the authentication server 110, the affiliate server 104 may then send the content to the user in response to the user's original request.
  • As shown in FIG. 3, the method of FIG. 2 is shown in terms of the flow of data between the servers [0028] 104, 110 and the computer 100. As seen, a user at client computer system 100 requests content from the affiliate server 104 at step 300. If the user is authenticated at the affiliate server 104 then the user may enter a domain operated by the affiliate server 104. If not, and the affiliate server 104 determines the user needs to be authenticated, then at step 305, in response to the request for content, the affiliate server 104 sends the user's computer system 100 an authentication response as part of an HTML page.
  • The user computer system [0029] 100 parses the HTML page. In doing so, the JavaScript tag within the authentication response directs the user's computer system 100 to the address of the authentication server 110 at step 310 to retrieve state information concerning the user. The state information is then sent by the authentication server 110 to the client computer system at step 315. The client's computer system 100 receives state information from the authentication server 110 and executes the executable scripts based on the state information to determine if the user is already logged on to the authentication server 110. If the client is already logged on the authentication server 110, the user computer system 100 is directed by the executable script to the authentication server 110 at step 320 to retrieve the vouching information as at step 325.
  • If the client is not already logged on the authentication server [0030] 110, and in one embodiment of the present invention, the executable script causes the web browser to display a login screen for the user to input login information. Importantly, the login screen is constructed within the context of the look and feel of the site as operated by the affiliate server 104. The information collected through the use of the login screen is sent by the browser of the computer system 100 to the authentication server 110 at step 330 and the authentication server 110 returns the state information at step 335.
  • Thereafter, the browser requests vouching information from the authentication server at step [0031] 340 and receives the vouching information at step 345. The vouching information is then forwarded by the browser to the affiliate server at step 350 and the affiliate server 104 logs the user therein. The affiliate server 104 returns the information as originally requested by the user at step 355 which may be substantive in nature or may be an introductory splash screen or the like.
  • In the present invention, and as seen in FIG. 3, the affiliate server [0032] 104 and the authentication server 110 never communicate directly, at least when logging in the user to the affiliate server 104. Instead, all communications are through the user computer system 100. As may be appreciated, such an arrangement facilitates the use of cookies that are stored on the computer 100 to identify the user to both servers 104, 100. Nevertheless, the servers 104, 110 may communicate directly without departing from the scope of the present invention.
  • In the present invention, the in-line sign in process is characterized by the executable script and related items as sent by the affiliate server [0033] 104 to effectuate all communications between the computer system 100 and the authentication server 110. Thus, the user need not be bothered with such tasks and is in fact unaware that such communications are taking place. Thus, such sign in with the affiliate server 104 is seamless or nearly so, even with the involvement of authentication server 110. Moreover, even if the user must input information to be sent to the authentication server 110 as at step 240 of FIG. 2, such information is inputted into a page constructed to have the look and feel of the site operated by the affiliate server 104 so that the page is a view associated with the affiliate server 104 and the user is not started to see a different view from the authentication server 110 which has a different look and feel.
  • The programming necessary to effectuate the processes performed in connection with the present invention is relatively straight-forward and should be apparent to the relevant programming public. Accordingly, such programming is not attached hereto. Any particular programming, then, may be employed to effectuate the present invention without departing from the spirit and scope thereof. [0034]
  • As should now be understood, the present invention provides a method of in-line sign in that allows a user to sign into a first server based on state information from a second server. The method allows the first (affiliate) server to use, within its own user interface, the functional sign-in methodology of the second (authentication) server. Changes could be made to the embodiments disclosed above without departing from the broad inventive concepts thereof. For example, the invention could be practiced on two unaffiliated servers rather than an authentication server and an affiliate server. It is understood, therefore, that the present invention is not limited to the particular embodiments disclosed, but it is intended to cover modifications within the spirit and scope of the present invention as defined by the appended claims. [0035]

Claims (14)

What is claimed is:
1. A method of seamlessly authenticating a user to a first server by way of a second server, the method comprising:
requesting content from the first server;
receiving an authentication response from the first server, the authentication response including an address of the second server and an executable script; and
executing the executable script, including:
issuing a request to the second server for state information corresponding to the user;
receiving the state information from the second server; and
determining, based on the state information, whether the user is authenticated to the second server; and
if the user is not authenticated to the second server:
displaying a login module for collecting login information for authenticating the user to the second server, the login module being displayed with a view associated with the first server.
2. The method of claim 1 wherein the login module is displayed according to information received with the authentication response from the first server.
3. The method of claim 1 further comprising, if the user is authenticated to the second server:
issuing a request to the second server for vouching information for authenticating the user to the first server;
4. The method of claim 3 further comprising, if the user is authenticated to the second server:
issuing a request to the second server for vouching information for authenticating the user to the first server;
receiving the vouching information;
forwarding the vouching information to the first server; and
receiving the requested content from the first server.
5. The method of claim 1 comprising, if the user is not authenticated to the second server:
displaying the login module;
collecting the login information; and
forwarding the collected login information to the second server.
6. The method of claim 5 comprising, if the user is not authenticated to the second server:
displaying the login module;
collecting the login information; and
forwarding the collected login information to the second server; and
receiving an acknowledgment that the user is now authenticated to the second server.
7. The method of claim 6 comprising, if the user is not authenticated to the second server:
displaying the login module;
collecting the login information; and
forwarding the collected login information to the second server;
receiving an acknowledgment that the user is now authenticated to the second server;
issuing a request to the second server for vouching information for authenticating the user to the first server;
receiving the vouching information;
forwarding the vouching information to the first server; and
receiving the requested content from the first server.
8. A computer readable medium having stored thereon computer-executable instructions for seamlessly authenticating a user to a first server by way of a second server, the instructions organized into modules including:
a module for requesting content from the first server;
a module for receiving an authentication response from the first server, the authentication response including an address of the second server and an executable script; and
a module for executing the executable script, including:
a sub module for issuing a request to the second server for state information corresponding to the user;
a sub module for receiving the state information from the second server; and
a sub module for determining, based on the state information, whether the user is authenticated to the second server; and
if the user is not authenticated to the second server:
a module for displaying a login module for collecting login information for authenticating the user to the second server, the login module being displayed with a view associated with the first server.
9. The medium of claim 8 wherein the module for displaying a login module for collecting login information for authenticating the user to the second server displays the login module according to information received with the authentication response from the first server.
10. The medium of claim 8 further comprising, if the user is authenticated to the second server:
a module for also issuing a request to the second server for vouching information for authenticating the user to the first server;
11. The medium of claim 10 further comprising, if the user is authenticated to the second server:
a module for receiving the vouching information;
a module for forwarding the vouching information to the first server; and
a module receiving the requested content from the first server.
12. The medium of claim 8, if the user is not authenticated to the second server:
a module for collecting the login information; and
a module for forwarding the collected login information to the second server.
13. The medium of claim 12, if the user is not authenticated to the second server, the fourth module comprising:
a module for receiving an acknowledgment that the user is now authenticated to the second server.
14. The computer of claim 13, if the user is not authenticated to the second server, the fourth module comprising:
a module for issuing a request to the second server for vouching information for authenticating the user to the first server;
a module for receiving the vouching information;
a module for forwarding the vouching information to the first server; and
a module for receiving the requested content from the first server.
US09/792,359 2001-02-23 2001-02-23 Transparent authentication using an authentication server Expired - Fee Related US7421731B2 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US09/792,359 US7421731B2 (en) 2001-02-23 2001-02-23 Transparent authentication using an authentication server

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
US09/792,359 US7421731B2 (en) 2001-02-23 2001-02-23 Transparent authentication using an authentication server

Publications (2)

Publication Number Publication Date
US20020120867A1 true US20020120867A1 (en) 2002-08-29
US7421731B2 US7421731B2 (en) 2008-09-02

Family

ID=25156629

Family Applications (1)

Application Number Title Priority Date Filing Date
US09/792,359 Expired - Fee Related US7421731B2 (en) 2001-02-23 2001-02-23 Transparent authentication using an authentication server

Country Status (1)

Country Link
US (1) US7421731B2 (en)

Cited By (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030065789A1 (en) * 2001-09-28 2003-04-03 Gopinath Meghashyam Seamless and authenticated transfer of a user from an e-business website to an affiliated e-business website
US20030149781A1 (en) * 2001-12-04 2003-08-07 Peter Yared Distributed network identity
US20050005132A1 (en) * 2003-07-03 2005-01-06 International Business Machines Corporation Password management
US20050177732A1 (en) * 2004-01-23 2005-08-11 International Business Machines Corporation Intersystem communications
US20050289641A1 (en) * 2003-04-30 2005-12-29 Sony Corporation Terminal device, providing server, electronic-information using method, electronic-information providing method, terminal-device program, providing-server program, mediating program and storage medium
US20070288634A1 (en) * 2006-06-12 2007-12-13 Fuji Xerox Co., Ltd. Computer readable recording medium storing control program, communication system and computer data signal embedded in carrier wave
US20090158414A1 (en) * 2007-12-18 2009-06-18 Kapil Chaudhry Method and apparatus for mutually authenticating a user device of a primary service provider
US20090164568A1 (en) * 2007-12-20 2009-06-25 Electronics And Telecommunications Research Institute Method for integrating management of posted articles and terminal for the same
US20120260327A1 (en) * 2011-04-08 2012-10-11 Microsoft Corporation Multi-browser authentication
US20130086667A1 (en) * 2011-10-04 2013-04-04 Salesforce.Com, Inc. Method and system for providing login as a service
US20150052434A1 (en) * 2001-03-21 2015-02-19 Theplatform For Media, Inc., A Washington Corporation Method and System for Managing and Distributing Digital Media
US9047456B2 (en) * 2012-03-20 2015-06-02 Canon Information And Imaging Solutions, Inc. System and method for controlling access to a resource
CN105095471A (en) * 2015-08-07 2015-11-25 合肥工业大学 Method for context sensing recommendation based on short memory
US20160036800A1 (en) * 2013-04-15 2016-02-04 Visa Europe Limited Method and system for creating a unique identifier

Families Citing this family (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8490168B1 (en) * 2005-10-12 2013-07-16 At&T Intellectual Property I, L.P. Method for authenticating a user within a multiple website environment to provide secure access
US9563718B2 (en) * 2007-06-29 2017-02-07 Intuit Inc. Using interactive scripts to facilitate web-based aggregation
JP5252989B2 (en) * 2008-05-15 2013-07-31 キヤノン株式会社 Information processing apparatus, control method therefor, data management system, and computer program
US8613059B2 (en) 2009-12-18 2013-12-17 At&T Intellectual Property I, L.P. Methods, systems and computer program products for secure access to information
US8850187B2 (en) * 2012-05-17 2014-09-30 Cable Television Laboratories, Inc. Subscriber certificate provisioning
US9172694B2 (en) * 2012-05-22 2015-10-27 International Business Machines Corporation Propagating delegated authorized credentials through legacy systems
JP6255858B2 (en) * 2012-10-31 2018-01-10 株式会社リコー System and service providing apparatus
US10091190B2 (en) 2015-12-11 2018-10-02 International Business Machines Corporation Server-assisted authentication

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5987517A (en) * 1996-03-27 1999-11-16 Microsoft Corporation System having a library of protocol independent reentrant network interface functions for providing common calling interface for communication and application protocols
US6092196A (en) * 1997-11-25 2000-07-18 Nortel Networks Limited HTTP distributed remote user authentication system
US6192361B1 (en) * 1997-12-23 2001-02-20 Alcatel Usa Sourcing, L.P. Full group privileges access system providing user access security protection for a telecommunications switching system
US6412009B1 (en) * 1999-03-15 2002-06-25 Wall Data Incorporated Method and system for providing a persistent HTTP tunnel
US20020194215A1 (en) * 2000-10-31 2002-12-19 Christian Cantrell Advertising application services system and method
US6535294B1 (en) * 1998-06-23 2003-03-18 Discount Labels, Inc. System and method for preparing customized printed products over a communications network
US6947903B1 (en) * 1999-08-06 2005-09-20 Elcommerce.Com.Inc. Method and system for monitoring a supply-chain

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5987517A (en) * 1996-03-27 1999-11-16 Microsoft Corporation System having a library of protocol independent reentrant network interface functions for providing common calling interface for communication and application protocols
US6092196A (en) * 1997-11-25 2000-07-18 Nortel Networks Limited HTTP distributed remote user authentication system
US6192361B1 (en) * 1997-12-23 2001-02-20 Alcatel Usa Sourcing, L.P. Full group privileges access system providing user access security protection for a telecommunications switching system
US6535294B1 (en) * 1998-06-23 2003-03-18 Discount Labels, Inc. System and method for preparing customized printed products over a communications network
US6412009B1 (en) * 1999-03-15 2002-06-25 Wall Data Incorporated Method and system for providing a persistent HTTP tunnel
US6947903B1 (en) * 1999-08-06 2005-09-20 Elcommerce.Com.Inc. Method and system for monitoring a supply-chain
US20020194215A1 (en) * 2000-10-31 2002-12-19 Christian Cantrell Advertising application services system and method

Cited By (26)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20150052434A1 (en) * 2001-03-21 2015-02-19 Theplatform For Media, Inc., A Washington Corporation Method and System for Managing and Distributing Digital Media
US10079869B2 (en) * 2001-03-21 2018-09-18 Comcast Cable Communications Management, Llc Method and system for managing and distributing digital media
US20030065789A1 (en) * 2001-09-28 2003-04-03 Gopinath Meghashyam Seamless and authenticated transfer of a user from an e-business website to an affiliated e-business website
US20030149781A1 (en) * 2001-12-04 2003-08-07 Peter Yared Distributed network identity
US7849204B2 (en) 2001-12-04 2010-12-07 Oracle America, Inc. Distributed network identity
US7610390B2 (en) * 2001-12-04 2009-10-27 Sun Microsystems, Inc. Distributed network identity
US20080016232A1 (en) * 2001-12-04 2008-01-17 Peter Yared Distributed Network Identity
US8037194B2 (en) 2001-12-04 2011-10-11 Oracle America, Inc. Distributed network identity
US20050289641A1 (en) * 2003-04-30 2005-12-29 Sony Corporation Terminal device, providing server, electronic-information using method, electronic-information providing method, terminal-device program, providing-server program, mediating program and storage medium
US7650632B2 (en) * 2003-07-03 2010-01-19 International Business Machines Corporation Password management
US20050005132A1 (en) * 2003-07-03 2005-01-06 International Business Machines Corporation Password management
US20050177732A1 (en) * 2004-01-23 2005-08-11 International Business Machines Corporation Intersystem communications
US20070288634A1 (en) * 2006-06-12 2007-12-13 Fuji Xerox Co., Ltd. Computer readable recording medium storing control program, communication system and computer data signal embedded in carrier wave
US9692602B2 (en) * 2007-12-18 2017-06-27 The Directv Group, Inc. Method and apparatus for mutually authenticating a user device of a primary service provider
US20090158414A1 (en) * 2007-12-18 2009-06-18 Kapil Chaudhry Method and apparatus for mutually authenticating a user device of a primary service provider
US20140380438A1 (en) * 2007-12-20 2014-12-25 Electronics And Telecommunications Research Institute Method for integrating management of posted articles and terminal for the same
US20090164568A1 (en) * 2007-12-20 2009-06-25 Electronics And Telecommunications Research Institute Method for integrating management of posted articles and terminal for the same
US9641497B2 (en) * 2011-04-08 2017-05-02 Microsoft Technology Licensing, Llc Multi-browser authentication
US20120260327A1 (en) * 2011-04-08 2012-10-11 Microsoft Corporation Multi-browser authentication
US9830435B2 (en) * 2011-10-04 2017-11-28 Salesforce.Com, Inc. Method and system for providing login as a service
US20130086667A1 (en) * 2011-10-04 2013-04-04 Salesforce.Com, Inc. Method and system for providing login as a service
US9047456B2 (en) * 2012-03-20 2015-06-02 Canon Information And Imaging Solutions, Inc. System and method for controlling access to a resource
US20160036800A1 (en) * 2013-04-15 2016-02-04 Visa Europe Limited Method and system for creating a unique identifier
US10257178B2 (en) * 2013-04-15 2019-04-09 Visa Europe Limited Method and system for creating a unique identifier
US10764269B2 (en) 2013-04-15 2020-09-01 Visa Europe Limited Method and system for creating a unique identifier
CN105095471A (en) * 2015-08-07 2015-11-25 合肥工业大学 Method for context sensing recommendation based on short memory

Also Published As

Publication number Publication date
US7421731B2 (en) 2008-09-02

Similar Documents

Publication Publication Date Title
US9210160B2 (en) Establishing and maintaining an improved single sign-on (SSO) facility
US8595809B2 (en) Reusable authentication experience tool
US9081756B2 (en) Method and apparatus for populating a form with data
US8572712B2 (en) Device independent authentication system and method
US9244992B2 (en) Method, system, and computer program product for simulating an online session
US20140372176A1 (en) Method and apparatus for anonymous data profiling
US20140101718A1 (en) Cross-domain authentication
JP3866768B2 (en) Method and apparatus for forming hypermedia interactive
US6751654B2 (en) Simulating web cookies for non-cookie capable browsers
EP0953170B1 (en) Data access control
DE69633564T2 (en) Access control and monitoring system for internet servers
US5740252A (en) Apparatus and method for passing private demographic information between hyperlink destinations
CA2734774C (en) A user-transparent system for uniquely identifying network-distributed devices without explicitly provided device or user identifying information
CA2222480C (en) System and method for providing anonymous personalized browsing in a network
AU758865B2 (en) Server-side web summary generation and presentation
US6632248B1 (en) Customization of network documents by accessing customization information on a server computer using uniquie user identifiers
US7200804B1 (en) Method and apparatus for providing automation to an internet navigation application
JP4493249B2 (en) Network system, server, timeout time information providing method, and program
US7426530B1 (en) System and method for providing customers with seamless entry to a remote server
JP3992250B2 (en) Communication control method and apparatus
US6725425B1 (en) Method and apparatus for retrieving information from semi-structured, web-based data sources
US7606918B2 (en) Account creation via a mobile device
US6256739B1 (en) Method and apparatus to determine user identity and limit access to a communications network
KR100800339B1 (en) Method and system for user-determined authentication and single-sign-on in a federated environment
DE69838262T2 (en) General user authentication for network calculator

Legal Events

Date Code Title Description
AS Assignment

Owner name: MICROSOFT CORPORATION, WASHINGTON

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:MITCHELL, CHRISTOPHER E.;BATTLE, RYAN W.;ANDERSON, DARREN L.;AND OTHERS;REEL/FRAME:011574/0349;SIGNING DATES FROM 20010215 TO 20010221

AS Assignment

Owner name: MICROSOFT CORPORATION, WASHINGTON

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:GUO, MICHAEL WEI-QUIANG;REEL/FRAME:012870/0228

Effective date: 20020429

STCF Information on status: patent grant

Free format text: PATENTED CASE

FPAY Fee payment

Year of fee payment: 4

AS Assignment

Owner name: MICROSOFT TECHNOLOGY LICENSING, LLC, WASHINGTON

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:MICROSOFT CORPORATION;REEL/FRAME:034541/0001

Effective date: 20141014

FPAY Fee payment

Year of fee payment: 8

FEPP Fee payment procedure

Free format text: MAINTENANCE FEE REMINDER MAILED (ORIGINAL EVENT CODE: REM.); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY